# Latest

**URL:** https://discuss.elastic.co/latest.md?page=848

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 849

---

## [Custom machine learning rule](https://discuss.elastic.co/t/custom-machine-learning-rule/319944)

<div class="topic-metadata">

**Author:** [@sachinmestry](https://discuss.elastic.co/u/sachinmestry)\
**Replies:** 8\
**Last updated:** [December 21, 2022, 6:43pm UTC](https://discuss.elastic.co/t/custom-machine-learning-rule/319944 "2022-12-21T18:43:32Z")

</div>

HI Everyone, I want to create rule where if any change in the user's location is observed i should get an alert for the same. I am using VPN geo location for tracking the same with respect to user. I am trying o achiev…

---

## [How can i insert multiple records through 1 querry in elasticsearch](https://discuss.elastic.co/t/how-can-i-insert-multiple-records-through-1-querry-in-elasticsearch/321615)

<div class="topic-metadata">

**Author:** [@Ali5](https://discuss.elastic.co/u/Ali5)\
**Replies:** 2\
**Last updated:** [December 21, 2022, 6:20pm UTC](https://discuss.elastic.co/t/how-can-i-insert-multiple-records-through-1-querry-in-elasticsearch/321615 "2022-12-21T18:20:23Z")

</div>

my index name is "products" that have fields of name,description,id,price it has 40 records i want to create automatically add 1000 records in it can anyone help i am new to it

---

## [Anomaly Detection Using Advanced Configuration](https://discuss.elastic.co/t/anomaly-detection-using-advanced-configuration/321637)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [December 21, 2022, 6:15pm UTC](https://discuss.elastic.co/t/anomaly-detection-using-advanced-configuration/321637 "2022-12-21T18:15:09Z")

</div>

Hi team, I am using ELK platinum version. Few days back i created a ML job which detect max value for a particular string field value Here i can see cross symbol and dot cross symbol denote multi bucket i don't w…

---

## [Log4J Errors During Elastic APM Instrumentation](https://discuss.elastic.co/t/log4j-errors-during-elastic-apm-instrumentation/321696)

<div class="topic-metadata">

**Author:** [@pkrishnan1](https://discuss.elastic.co/u/pkrishnan1)\
**Replies:** 5\
**Last updated:** [December 21, 2022, 4:12pm UTC](https://discuss.elastic.co/t/log4j-errors-during-elastic-apm-instrumentation/321696 "2022-12-21T16:12:59Z")

</div>

We are trying to instrument Elastic APM(1.35.0) into a weblogic server using Log4J 2.17.1. Getting the below error while the agent is starting up. Can someone help explain why we see this error DEBUG StatusLogger Unable…

---

## [Create Watcher Elastic](https://discuss.elastic.co/t/create-watcher-elastic/321728)

<div class="topic-metadata">

**Author:** [@alvaro\_ing](https://discuss.elastic.co/u/alvaro_ing)\
**Replies:** 1\
**Last updated:** [December 21, 2022, 3:56pm UTC](https://discuss.elastic.co/t/create-watcher-elastic/321728 "2022-12-21T15:56:27Z")

</div>

Good morning, I would like to create a watcher in elasticsearch. I have a python function that needs two input parameters. The goal is that every time a new document arrives at an index, this watcher automatically exec…

---

## [Apm Agent Send Duplicate record in mysql](https://discuss.elastic.co/t/apm-agent-send-duplicate-record-in-mysql/321440)

<div class="topic-metadata">

**Author:** [@Brayan\_Alvarez](https://discuss.elastic.co/u/Brayan_Alvarez)\
**Replies:** 3\
**Last updated:** [December 21, 2022, 3:49pm UTC](https://discuss.elastic.co/t/apm-agent-send-duplicate-record-in-mysql/321440 "2022-12-21T15:49:50Z")

</div>

Kibana version: 8.5.3 Elasticsearch version: 8.5.3 APM Server version: 8.5.3 APM Agent language and version: Node Js 3.41.0 Browser version: FIrefox Original install method (e.g. download page, yum, deb, from source…

---

## [Kibana dashboard using Html or React](https://discuss.elastic.co/t/kibana-dashboard-using-html-or-react/317494)

<div class="topic-metadata">

**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\
**Replies:** 2\
**Last updated:** [October 27, 2022, 6:18am UTC](https://discuss.elastic.co/t/kibana-dashboard-using-html-or-react/317494 "2022-10-27T06:18:04Z")

</div>

So, I'm new to this and I want some help regarding KIBANA. So, in Kibana I've built a dashboard and now, I'm creating a webpage using react. So, by this, I want to ask whether we can connect the Kibana dashboard to the R…

---

## [Index\_not\_found\_exception error](https://discuss.elastic.co/t/index-not-found-exception-error/321581)

<div class="topic-metadata">

**Author:** [@Reg\_Dancy](https://discuss.elastic.co/u/Reg_Dancy)\
**Replies:** 2\
**Last updated:** [December 21, 2022, 3:13pm UTC](https://discuss.elastic.co/t/index-not-found-exception-error/321581 "2022-12-21T15:13:02Z")

</div>

Hello all, I'm working on removing nodes from my cluster to drain and I'm getting the errors {"error":{"root\_cause":\[{"type":"index\_not\_found\_exception","reason":"no such index and \[action.auto\_create\_index\] (\[.monitori…

---

## [Watcher - Write painless script for looping aggregated buckets](https://discuss.elastic.co/t/watcher-write-painless-script-for-looping-aggregated-buckets/321763)

<div class="topic-metadata">

**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\
**Replies:** 2\
**Last updated:** [December 21, 2022, 3:01pm UTC](https://discuss.elastic.co/t/watcher-write-painless-script-for-looping-aggregated-buckets/321763 "2022-12-21T15:01:10Z")

</div>

Hi, My Watcher condition is giving output as below: Watcher condition Output: { "\_shards": { "total": 1, "failed": 0, "successful": 1, "skipped": 0 }, "hits": { "hit…

---

## [Average calculations not consistent](https://discuss.elastic.co/t/average-calculations-not-consistent/321739)

<div class="topic-metadata">

**Author:** [@Wpq](https://discuss.elastic.co/u/Wpq)\
**Replies:** 9\
**Last updated:** [December 21, 2022, 2:58pm UTC](https://discuss.elastic.co/t/average-calculations-not-consistent/321739 "2022-12-21T14:58:43Z")

</div>

I have data of the type { "user": "john", "country": "japan", "applied": 1 }, { "user": "mary", "country": "japan", "applied": 1 }, { "user": "paul", "country": "japan", "applied": 0 }, { "user": "fr…

---

## [Elasticsearch install error on MAC](https://discuss.elastic.co/t/elasticsearch-install-error-on-mac/321693)

<div class="topic-metadata">

**Author:** [@mail2shanth](https://discuss.elastic.co/u/mail2shanth)\
**Replies:** 6\
**Last updated:** [December 21, 2022, 2:31pm UTC](https://discuss.elastic.co/t/elasticsearch-install-error-on-mac/321693 "2022-12-21T14:31:23Z")

</div>

Hi, I am new to Elasticsearch, tried to install, when I try to hit the URL "http://localhost:9200/", it works fine. However when I need to reset a password it gives an error. ./elasticsearch-reset-password -u kibana\_sy…

---

## [Update existing record in elasticsearch while ingesting data through logstash pipeline](https://discuss.elastic.co/t/update-existing-record-in-elasticsearch-while-ingesting-data-through-logstash-pipeline/321769)

<div class="topic-metadata">

**Author:** [@Tanvi07](https://discuss.elastic.co/u/Tanvi07)\
**Replies:** 0\
**Last updated:** [December 21, 2022, 1:10pm UTC](https://discuss.elastic.co/t/update-existing-record-in-elasticsearch-while-ingesting-data-through-logstash-pipeline/321769 "2022-12-21T13:10:24Z")

</div>

Hi, I have a requirement where I need to ingest data from mysql db into elasticsearch, for this i have made use of logstash jdbc input plugin. My data is in large volume and i need to implement incremental ingestion now…

---

## [Kibana is unable to Query Elasticsearch after restoring ELK stack](https://discuss.elastic.co/t/kibana-is-unable-to-query-elasticsearch-after-restoring-elk-stack/321692)

<div class="topic-metadata">

**Author:** [@dwalker](https://discuss.elastic.co/u/dwalker)\
**Replies:** 4\
**Last updated:** [December 21, 2022, 1:01pm UTC](https://discuss.elastic.co/t/kibana-is-unable-to-query-elasticsearch-after-restoring-elk-stack/321692 "2022-12-21T13:01:23Z")

</div>

Hello everyone, I have came across an issue where Kibana appears to be unable to query Elasticsearch at all no matter the query. It is at the point now where it will not even finish executing a query inside of 10 minutes…

---

## [Aggregation with additional document fields? (Like a SQL inner join to nested group by)](https://discuss.elastic.co/t/aggregation-with-additional-document-fields-like-a-sql-inner-join-to-nested-group-by/321767)

<div class="topic-metadata">

**Author:** [@rd8388](https://discuss.elastic.co/u/rd8388)\
**Replies:** 0\
**Last updated:** [December 21, 2022, 12:43pm UTC](https://discuss.elastic.co/t/aggregation-with-additional-document-fields-like-a-sql-inner-join-to-nested-group-by/321767 "2022-12-21T12:43:23Z")

</div>

Thanks in advance for any help with achieving our goal or on the terminology I may use to find an example in Elasticsearch documentation and/or forum. When performing a Max Terms aggregation to get the date of the newes…

---

## [Elastic Agent for Android devices](https://discuss.elastic.co/t/elastic-agent-for-android-devices/321766)

<div class="topic-metadata">

**Author:** [@Jesus\_Arellano](https://discuss.elastic.co/u/Jesus_Arellano)\
**Replies:** 0\
**Last updated:** [December 21, 2022, 12:41pm UTC](https://discuss.elastic.co/t/elastic-agent-for-android-devices/321766 "2022-12-21T12:41:15Z")

</div>

Hi, I was wondering if there is an Elastic agent for Android devices. The idea would be an agent similar to metricbeat that would allow to monitor CPU, RAM, processes, battery usage... Do you know any alternative? I f…

---

## [Stack Monitoring](https://discuss.elastic.co/t/stack-monitoring/321760)

<div class="topic-metadata">

**Author:** [@tejal\_kubde](https://discuss.elastic.co/u/tejal_kubde)\
**Replies:** 4\
**Last updated:** [December 21, 2022, 12:40pm UTC](https://discuss.elastic.co/t/stack-monitoring/321760 "2022-12-21T12:40:08Z")

</div>

Hi, I'm new to elasticsearch. I'm currently trying to enable stack monitoring on my dev setup. Hence, can someone tell me which is the best possible way to enable it.

---

## [Elasticsearch shard allocation, uneven distribution of shards among nodes](https://discuss.elastic.co/t/elasticsearch-shard-allocation-uneven-distribution-of-shards-among-nodes/321621)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 2\
**Last updated:** [December 21, 2022, 12:35pm UTC](https://discuss.elastic.co/t/elasticsearch-shard-allocation-uneven-distribution-of-shards-among-nodes/321621 "2022-12-21T12:35:53Z")

</div>

Hi, May I ask you for help with The problem with uneven allocation of shards on the elatsic cluster is repeated again. This condition is causes the full nodes consumes 90% CPUs and the whole cluster starts to refuse th…

---

## [Logstash problem with disabling ecs\_compatibility](https://discuss.elastic.co/t/logstash-problem-with-disabling-ecs-compatibility/321740)

<div class="topic-metadata">

**Author:** [@Anonym123](https://discuss.elastic.co/u/Anonym123)\
**Replies:** 2\
**Last updated:** [December 21, 2022, 12:18pm UTC](https://discuss.elastic.co/t/logstash-problem-with-disabling-ecs-compatibility/321740 "2022-12-21T12:18:06Z")

</div>

logstash image is: 7.17.3 with the prune plugin This is my logstash.conf pipeline.ecs\_compatibility: disabled input { beats { port =\> "XXXXXX" ecs\_compatibility =\> disabled } } …

---

## [Scrape metrics from elastic search 8](https://discuss.elastic.co/t/scrape-metrics-from-elastic-search-8/321758)

<div class="topic-metadata">

**Author:** [@smiley\_tamy](https://discuss.elastic.co/u/smiley_tamy)\
**Replies:** 0\
**Last updated:** [December 21, 2022, 12:17pm UTC](https://discuss.elastic.co/t/scrape-metrics-from-elastic-search-8/321758 "2022-12-21T12:17:42Z")

</div>

elasticsearch-prometheus-exporter is used to collect all relevant metrics and makes them available to Prometheus via the Elasticsearch REST API. http://:9200/\_prometheus/metrics This plugin supports till 7.17.7 version …

---

## [How to connect local kibana with elasticsearch ssh port forward?](https://discuss.elastic.co/t/how-to-connect-local-kibana-with-elasticsearch-ssh-port-forward/321757)

<div class="topic-metadata">

**Author:** [@tariqsajid](https://discuss.elastic.co/u/tariqsajid)\
**Replies:** 0\
**Last updated:** [December 21, 2022, 12:11pm UTC](https://discuss.elastic.co/t/how-to-connect-local-kibana-with-elasticsearch-ssh-port-forward/321757 "2022-12-21T12:11:34Z")

</div>

Hello, I would want to know how to connect my laptop's running kibana to elasticsearch on AWS while port forwarding it to my local system. chrome extension ## Multi Elasticsearch Head I'm not sure how to link Kibana to…

---

## [Logstash-output-syslog never writes anything to local syslog on REL8 in podman with podman-compose](https://discuss.elastic.co/t/logstash-output-syslog-never-writes-anything-to-local-syslog-on-rel8-in-podman-with-podman-compose/321697)

<div class="topic-metadata">

**Author:** [@Dale\_Bingham](https://discuss.elastic.co/u/Dale_Bingham)\
**Replies:** 5\
**Last updated:** [December 21, 2022, 12:07pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-never-writes-anything-to-local-syslog-on-rel8-in-podman-with-podman-compose/321697 "2022-12-21T12:07:40Z")

</div>

I have ELK in my podman-compose setup and I can push any logs I get to Logstash through to Elasticsearch just fine. It is when I am trying to also send to syslog for those that already have a process to pull all syslog d…

---

## [Logstash Scheduled Run of conf file and error alert](https://discuss.elastic.co/t/logstash-scheduled-run-of-conf-file-and-error-alert/321743)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [December 21, 2022, 11:41am UTC](https://discuss.elastic.co/t/logstash-scheduled-run-of-conf-file-and-error-alert/321743 "2022-12-21T11:41:32Z")

</div>

Hi , I'm using logstash to push my CSV data from a location to elasticsearch database. In my project I want a scheduled CSV data push at a particular time. Also want to know if any error is generated while pushing dat…

---

## [Internal Server Error after trying to save a Query](https://discuss.elastic.co/t/internal-server-error-after-trying-to-save-a-query/318416)

<div class="topic-metadata">

**Author:** [@LightX](https://discuss.elastic.co/u/LightX)\
**Replies:** 2\
**Last updated:** [November 23, 2022, 11:43am UTC](https://discuss.elastic.co/t/internal-server-error-after-trying-to-save-a-query/318416 "2022-11-23T11:43:12Z")

</div>

Hello together, we are using Kibana with version 7.8.1, unfortunately I am completely noob on Kibana so would really appricate any help. Basically, as soon as I try to "save search" I get internal server errors.... If …

---

## [Cluster yellow after upgrade from 7.16.2 to 7.17.7](https://discuss.elastic.co/t/cluster-yellow-after-upgrade-from-7-16-2-to-7-17-7/321412)

<div class="topic-metadata">

**Author:** [@duckasylum](https://discuss.elastic.co/u/duckasylum)\
**Replies:** 2\
**Last updated:** [December 21, 2022, 10:04am UTC](https://discuss.elastic.co/t/cluster-yellow-after-upgrade-from-7-16-2-to-7-17-7/321412 "2022-12-21T10:04:24Z")

</div>

Hi, I started a rolling upgrade as per directions from the guide. I have 6 data nodes (n1 and n2 are also ingest nodes) and after successfully upgrading n4 I upgraded n6 and the cluster is unable to get from yellow to gr…

---

## [Average size of data indices](https://discuss.elastic.co/t/average-size-of-data-indices/321625)

<div class="topic-metadata">

**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\
**Replies:** 5\
**Last updated:** [December 21, 2022, 10:03am UTC](https://discuss.elastic.co/t/average-size-of-data-indices/321625 "2022-12-21T10:03:36Z")

</div>

I have more of questions regarding size of data. what is average of data can Elasticsearch store par second? if there is 1M document of data in log file and volume 1G after storing in elastic database what is the new …

---

## [How to index text files (pdf, doc, txt...) in Java?](https://discuss.elastic.co/t/how-to-index-text-files-pdf-doc-txt-in-java/321678)

<div class="topic-metadata">

**Author:** [@gagidza](https://discuss.elastic.co/u/gagidza)\
**Replies:** 5\
**Last updated:** [December 21, 2022, 9:48am UTC](https://discuss.elastic.co/t/how-to-index-text-files-pdf-doc-txt-in-java/321678 "2022-12-21T09:48:53Z")

</div>

Hello everyone, some time ago I started to deal with Elasticsearch. Now I am faced with the task of indexing various text files from a certain directory for subsequent search by their contents. Since Elasticsearch uses …

---

## [Elastic search transform not working on nested fields](https://discuss.elastic.co/t/elastic-search-transform-not-working-on-nested-fields/321649)

<div class="topic-metadata">

**Author:** [@pranay\_jain](https://discuss.elastic.co/u/pranay_jain)\
**Replies:** 2\
**Last updated:** [December 21, 2022, 9:45am UTC](https://discuss.elastic.co/t/elastic-search-transform-not-working-on-nested-fields/321649 "2022-12-21T09:45:31Z")

</div>

Hi, I have an index which looks like below "properties": { "employee\_id": { "type": "long" }, "employee\_details": { "type": "nested", "dynamic": "false", "properties": { "city": { "t…

---

## [Java BulkProcessor](https://discuss.elastic.co/t/java-bulkprocessor/321733)

<div class="topic-metadata">

**Author:** [@Atefeh](https://discuss.elastic.co/u/Atefeh)\
**Replies:** 1\
**Last updated:** [December 21, 2022, 9:43am UTC](https://discuss.elastic.co/t/java-bulkprocessor/321733 "2022-12-21T09:43:18Z")

</div>

Bulk Java API supported adding a payload to each request in ES version 6.8 : public BulkProcessor add(DocWriteRequest request, @Nullable Object payload) { internalAdd(request, payload); return this; …

---

## [Logstash not able to connect to elastic search hosted on asw](https://discuss.elastic.co/t/logstash-not-able-to-connect-to-elastic-search-hosted-on-asw/321737)

<div class="topic-metadata">

**Author:** [@shivam585](https://discuss.elastic.co/u/shivam585)\
**Replies:** 8\
**Last updated:** [December 21, 2022, 9:17am UTC](https://discuss.elastic.co/t/logstash-not-able-to-connect-to-elastic-search-hosted-on-asw/321737 "2022-12-21T09:17:30Z")

</div>

\[2022-12-21T07:09:39,189\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /etc/logstash/log4j2.properties \[2022-12-21T07:09:39,205\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.versi…

---

## [Fleet server loading slowly](https://discuss.elastic.co/t/fleet-server-loading-slowly/321108)

<div class="topic-metadata">

**Author:** [@krzychohoho](https://discuss.elastic.co/u/krzychohoho)\
**Replies:** 1\
**Last updated:** [December 21, 2022, 9:15am UTC](https://discuss.elastic.co/t/fleet-server-loading-slowly/321108 "2022-12-21T09:15:57Z")

</div>

Hi, I came across a strange issue. My Fleet server is permamently loading. After ten minutes it pops up but there are other issues. This is what I see for 4 - 10 minutes every time: My Elastick stack is v 8.5.1. The…

[Previous page](https://discuss.elastic.co/latest.md?page=847)

[Next page](https://discuss.elastic.co/latest.md?page=849)
